For any of you who are tasked with ensuring that your organization is ready and prepared for threats and disasters, you’ve likely done your share of online research. Two terms likely keep popping up during this research: business continuity and disaster recovery.
Depending on the resource, these two terms might be used interchangeably… If this is the case - stop reading that website, white paper, or presentation! Business continuity and disaster recovery are not the same thing. They are related and connected but they are not the same.
You need to have a business continuity plan. You need to have a disaster recovery plan. So what are they and what should you be thinking about?
The Disaster Recovery Journal and Business Continuity Institute define business continuity as:
The strategic and tactical capability of the organization to plan for and respond to incidents and business disruptions in order to continue business operations at an acceptable predefined level.
In practical terms this means having a plan in place that ensures your organization or company is prepared to continue business processes. This means that your people, buildings, contracts, and infrastructure can continue to operate in the event of any type of disruption.
When thinking about business continuity, it helps to think about it like this: how can I guarantee that my business will continue and that there will be continuity of service and production?
This means you need consider all aspects of your business: the people, the ways you communicate, your building(s), your technology, your third-party contracts, etc.
The Disaster Recovery Journal and Business Continuity Institute define disaster recovery as:
The process, policies and procedures related to preparing for recovery or continuation of technology infrastructure, systems and applications which are vital to an organization after a disaster or outage.
NOTE: Disaster Recovery focuses on the information or technology systems that support business functions, as opposed to Business Continuity which involves planning for keeping all aspects of a business functioning in the midst of disruptive events. Disaster recovery is a subset of Business Continuity.
Do you see the differences here? Disaster recovery is focused on how to recover data, technology, infrastructure, systems and applications. This is necessary to ensure that business continuity can occur.
Disaster recovery planning requires you to think about how your data is stored, served, backed up and shared. You need to be confident that your employees can access the plans, files, folders, servers, email, presentations, etc. that they need from wherever they are working (an off-site office, from home, or in a coffee shop).
Putting it Together
You cannot have business continuity without disaster recovery. Disaster recovery does not guarantee business continuity. Both plans need to be in place and need to work together. Having one without the other will not ensure business success in the event of a threat or disaster. In fact, quite the opposite will likely occur.
A business continuity plan that ensures your business can continue with minimal to no interruptions requires a disaster recovery plan that ensures all data and technology is accessible and recoverable.